$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85dc89c0-f24f-3f95-b890-a64d54a07d93.roa File: 85dc89c0-f24f-3f95-b890-a64d54a07d93.roa (raw, json) Hash identifier: tDt030ShOZFKGhNAlX3E0yFz/CogEbGEX+gESClcfw0= Subject key identifier: 19:A1:0C:88:DE:69:3E:6D:16:16:2D:08:E5:07:C1:D3:5D:2A:75:2A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91C023D007C31BE81F79280 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85dc89c0-f24f-3f95-b890-a64d54a07d93.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 41297 IP address blocks: 2001:470:2e7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1c:02:3d:00:7c:31:be:81:f7:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=58479598-de36-45e4-950b-06b7a523f701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7d:72:1d:e3:da:ed:ce:10:70:fe:49:5b:68: 0d:81:c9:09:1d:8e:ea:13:d7:e2:a1:4b:52:42:9e: dc:d9:fa:b0:1d:7d:ed:f1:80:67:b0:93:7b:79:9e: d0:ec:16:52:f9:7e:2f:1b:20:64:a4:28:60:52:51: ce:10:fa:ba:0e:d3:1e:14:55:9b:c3:40:e2:26:81: 5b:1b:77:09:28:c4:78:b7:46:f0:59:10:2f:55:56: ce:3a:1f:40:50:b1:55:8e:82:2f:01:c2:0f:3d:bc: 29:cd:92:82:d1:94:7a:32:02:48:14:8c:39:59:b6: 7f:f2:e0:13:82:3a:0b:89:e2:9f:1a:02:71:b8:9d: a5:b5:09:e0:fd:85:23:e2:a7:24:ed:fe:dc:61:98: c1:65:e9:bf:3e:bf:f8:76:46:ce:03:b2:56:2a:08: 47:46:cf:64:ca:78:b7:aa:20:52:ec:3e:b5:2e:03: 36:dc:b9:ca:08:b6:f6:8c:23:2c:73:8d:18:01:51: 1d:09:5a:8e:7a:c1:4b:40:ca:63:71:14:4c:62:34: 69:65:48:b0:9e:4b:f8:d1:7f:a6:58:c9:8c:a3:ee: 78:4e:0d:aa:cf:64:ee:7b:62:6f:69:02:a1:49:aa: d4:bb:5d:a8:b9:b3:b3:58:e2:6a:de:ca:72:8d:1c: f6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A1:0C:88:DE:69:3E:6D:16:16:2D:08:E5:07:C1:D3:5D:2A:75:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85dc89c0-f24f-3f95-b890-a64d54a07d93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2e7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:00:37:d0:1f:be:63:fb:9d:87:a0:a4:ce:4e:df:bf:eb:ce: 59:9e:92:cc:a1:1a:57:94:23:d8:52:bf:14:8f:5c:d0:66:1e: df:ac:45:c6:70:4d:1d:30:c8:e2:49:4c:52:c3:fa:6f:71:85: a1:a4:42:4c:ec:81:99:55:88:c0:67:08:a6:9c:4f:85:af:b3: bd:fe:87:00:4a:08:d0:d7:38:f5:c6:0c:59:69:a6:d3:bd:92: ca:7b:6d:cc:5d:72:7c:93:77:5b:99:a0:08:da:2c:24:58:2c: 2c:53:78:66:53:cd:70:01:38:ee:13:d8:ca:8b:70:b5:f1:8f: be:33:63:67:b2:80:af:ad:df:8c:34:3e:73:ad:84:80:46:dd: ba:33:39:14:c0:6d:b1:ae:04:92:cc:bb:d7:c8:f9:8d:5a:19: b1:63:49:08:77:a7:83:f6:ca:22:cd:21:63:76:a6:e9:0a:b1: 3a:f6:fd:06:4e:37:e6:4e:2f:57:16:0f:b1:e2:09:6e:05:b6: 79:94:42:0b:1a:b9:44:e3:d6:f1:10:82:94:2c:d6:2c:d2:b4: fc:bb:dc:14:3a:b7:1a:7d:f4:62:65:e7:9e:4a:a2:be:f2:67: 36:c9:8c:9f:c6:a9:05:80:2c:43:c7:9d:39:ab:0b:c6:75:8e: d6:1d:c4:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5HAI9AHwxvoH3koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NTg0Nzk1OTgtZGUzNi00NWU0LTk1MGItMDZiN2E1MjNmNzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX1yHePa7c4QcP5JW2gNgckJHY7qE9fioUtS Qp7c2fqwHX3t8YBnsJN7eZ7Q7BZS+X4vGyBkpChgUlHOEPq6DtMeFFWbw0DiJoFb G3cJKMR4t0bwWRAvVVbOOh9AULFVjoIvAcIPPbwpzZKC0ZR6MgJIFIw5WbZ/8uAT gjoLieKfGgJxuJ2ltQng/YUj4qck7f7cYZjBZem/Pr/4dkbOA7JWKghHRs9kyni3 qiBS7D61LgM23LnKCLb2jCMsc40YAVEdCVqOesFLQMpjcRRMYjRpZUiwnkv40X+m WMmMo+54Tg2qz2Tue2JvaQKhSarUu12oubOzWOJq3spyjRz2aQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBmhDIjeaT5tFhYtCOUHwdNdKnUqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODVkYzg5YzAtZjI0Zi0z Zjk1LWI4OTAtYTY0ZDU0YTA3ZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIwAN9AfvmP7nYegpM5O37/rzlmeksyhGleUI9hSvxSPXNBmHt+s RcZwTR0wyOJJTFLD+m9xhaGkQkzsgZlViMBnCKacT4Wvs73+hwBKCNDXOPXGDFlp ptO9ksp7bcxdcnyTd1uZoAjaLCRYLCxTeGZTzXABOO4T2MqLcLXxj74zY2eygK+t 34w0PnOthIBG3bozORTAbbGuBJLMu9fI+Y1aGbFjSQh3p4P2yiLNIWN2pukKsTr2 /QZON+ZOL1cWD7HiCW4FtnmUQgsauUTj1vEQgpQs1izStPy73BQ6txp99GJl555K or7yZzbJjJ/GqQWALEPHnTmrC8Z1jtYdxLQ= -----END CERTIFICATE-----Generated at Mon Aug 4 07:42:18 2025 by rpki-client